Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public ...
A malware-spreading scumbag swimming through GitHub pushed malicious commits to more than 5,500 repositories on Monday as ...
Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated ...
On May 18, KrebsOnSecurity reported that a CISA contractor with administrative access to the agency’s code development ...
GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. This unsafe ...
TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results